Rebase to flake parts #9

2026-05-10 01:45:16 -03:00
parent 34b89af77f
commit f02606902c
46 changed files with 2382 additions and 166 deletions
@@ -0,0 +1,36 @@
+{ config, lib, ... }:
+let
+  webPort = 8081;
+  btPort = 51413;
+  downloadsDir = "/var/lib/downloads";
+in
+{
+  # qBittorrent (headless). Web UI: http://<host>:8081
+  services.qbittorrent = {
+    enable = true;
+    openFirewall = true;
+    webuiPort = webPort;
+    # Prefer a stable port for NAT/firewall and for easier debugging.
+    torrentingPort = btPort;
+  };
+
+  users.groups.qbittorrent = { };
+  users.users.qbittorrent = {
+    isSystemUser = true;
+    group = "qbittorrent";
+    extraGroups = [ "media" ];
+  };
+
+  systemd.tmpfiles.settings."nix-server-downloads-dir" = {
+    "${downloadsDir}"."d" = {
+      mode = "2775";
+      user = "root";
+      group = "media";
+    };
+  };
+
+  # Some NixOS versions don't open UDP for torrenting even when openFirewall=true.
+  networking.firewall.allowedTCPPorts = [ webPort btPort ];
+  networking.firewall.allowedUDPPorts = [ btPort ];
+}
+